blastex[.]bet

This domain is flagged as a high-risk brand impersonation threat targeting Blast, a legitimate blockchain-based platform. The domain blastex.bet mimics Blast’s branding to deceive users into engaging with a fraudulent online casino, leveraging the growing popularity of blockchain gambling to exploit unsuspecting victims. Analysis indicates this is a deliberate attempt to mislead users by replicating the target brand’s identity, a tactic commonly associated with financial fraud and credential harvesting schemes. Infrastructure analysis reveals multiple concerning indicators. The domain resolves to IP address 69.5.189.57, hosted under AS42624 (Global-Data System IT Corporation) in Switzerland. It was registered through SC-GLOBAL-DATA-20040120, an autonomous system number (ASN: 42624) with a history of hosting suspicious domains. The domain lacks an SSL certificate, increasing the risk of man-in-the-middle attacks and data interception. VirusTotal detections show 5 out of 95 security vendors flagging the domain as malicious, while it appears on one security blocklist, specifically PhishDestroy. The page title, 'BLASTEX | Play at the best online casino based on Blockchain,' directly impersonates Blast’s branding, further confirming the intent to deceive. Mitigation steps should focus on immediate containment and user awareness. Network administrators are advised to block the domain blastex.bet and its associated IP (69.5.189.57) at the firewall or DNS level to prevent access. Organizations should monitor for any internal traffic attempting to resolve this domain, as it may indicate compromised endpoints or insider threats. Users should be educated on recognizing brand impersonation tactics, particularly in the context of blockchain-based services, and encouraged to verify domain authenticity through official channels. Additionally, security teams should review logs for any interactions with this domain and investigate potential data exposure or credential theft linked to this campaign.